diff --git a/tracking_denials/hal_bluetooth_btlinux.te b/tracking_denials/hal_bluetooth_btlinux.te new file mode 100644 index 00000000..0136730b --- /dev/null +++ b/tracking_denials/hal_bluetooth_btlinux.te @@ -0,0 +1,4 @@ +# b/182320300 +dontaudit hal_bluetooth_btlinux servicemanager:binder { call }; +dontaudit hal_bluetooth_btlinux servicemanager:binder { call }; +dontaudit hal_bluetooth_btlinux default_android_service:service_manager { find }; diff --git a/tracking_denials/hal_power_stats_default.te b/tracking_denials/hal_power_stats_default.te index 866c5176..a3e7430e 100644 --- a/tracking_denials/hal_power_stats_default.te +++ b/tracking_denials/hal_power_stats_default.te @@ -10,3 +10,5 @@ dontaudit hal_power_stats_default sysfs:dir { open }; dontaudit hal_power_stats_default sysfs:file { read }; dontaudit hal_power_stats_default sysfs:file { open }; dontaudit hal_power_stats_default sysfs:file { open }; +# b/182320246 +dontaudit hal_power_stats_default default_android_service:service_manager { add }; diff --git a/tracking_denials/init-insmod-sh.te b/tracking_denials/init-insmod-sh.te index 9f615fab..ca69d4cb 100644 --- a/tracking_denials/init-insmod-sh.te +++ b/tracking_denials/init-insmod-sh.te @@ -2,3 +2,12 @@ dontaudit init-insmod-sh vendor_regmap_debugfs:dir { search }; dontaudit init-insmod-sh vendor_regmap_debugfs:dir { search }; dontaudit init-insmod-sh vendor_regmap_debugfs:dir { search }; +# b/182320258 +dontaudit init-insmod-sh vendor_file:system { module_load }; +dontaudit init-insmod-sh vendor_file:system { module_load }; +dontaudit init-insmod-sh vendor_file:system { module_load }; +dontaudit init-insmod-sh vendor_file:system { module_load }; +dontaudit init-insmod-sh vendor_file:system { module_load }; +dontaudit init-insmod-sh vendor_file:system { module_load }; +dontaudit init-insmod-sh vendor_file:system { module_load }; +dontaudit init-insmod-sh vendor_file:system { module_load }; diff --git a/tracking_denials/rild.te b/tracking_denials/rild.te index 10680da3..405763e2 100644 --- a/tracking_denials/rild.te +++ b/tracking_denials/rild.te @@ -14,3 +14,12 @@ dontaudit rild unlabeled:file { open }; dontaudit rild unlabeled:file { read }; dontaudit rild unlabeled:file { getattr }; dontaudit rild unlabeled:file { lock }; +# b/182320172 +dontaudit rild sota_prop:file { map }; +dontaudit rild sota_prop:file { getattr }; +dontaudit rild sota_prop:file { open }; +dontaudit rild sota_prop:file { read }; +dontaudit rild sota_prop:file { read }; +dontaudit rild sota_prop:file { open }; +dontaudit rild sota_prop:file { getattr }; +dontaudit rild sota_prop:file { map };